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Abstract.  In  this  paper  we  start  developing  a  detailed  theory  of  nega- 
Hadamard  transforms.  Consequently,  we  derive  several  results  on  ne- 
gabentness  of  concatenations,  and  partially-symmetric  functions.  We  also 
obtain  a  characterization  of  bent -negabent  functions  in  a  subclass  of 
Maiorana-McFarland  set.  As  a  by-product  of  our  results  we  obtain  sim¬ 
ple  proofs  of  several  existing  facts. 
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1  Introduction 

Let  F2  be  the  prime  field  of  characteristic  2  and  let  F2  is  the  n-dimensional 
vector  space  over  F2.  A  function  from  F2  to  F2  is  called  a  Boolean  function  on 
n  variables.  The  reader  is  referred  to  Section  fTTTI  for  all  the  basic  notations  and 
definitions  related  to  Boolean  functions. 

Boolean  functions  received  a  lot  of  attention  in  the  field  of  coding  theory,  se¬ 
quences  and  cryptology.  The  most  important  method  of  analyzing  the  Boolean 
functions  is  by  exploiting  a  certain  kind  of  discrete  Fourier  transform,  which  is 
known,  in  Boolean  function  literature,  as  Walsh,  Hadamard,  or  Walsh-Hadamard 
transform  j4] .  The  maximum  nonlinearity  of  a  Boolean  function  is  achieved  when 
the  maximum  absolute  value  in  the  Walsh  spectrum  is  minimized.  For  even  n, 
such  functions  are  well  known  as  bent  functions  and  the  magnitudes  of  all  the 
values  in  Walsh  spectrum  are  the  same.  From  the  perspective  of  coding  theory, 
these  functions  attain  the  covering  radius  of  first  order  Reed-Muller  code.  To¬ 
wards  a  nega-periodic  analogue  of  the  bent  criteria,  one  can  use  nega-Hadamard 
transform  and  investigate  Boolean  functions  with  nega  flat  spectrum.  This  mo¬ 
tivated  several  works  in  the  area  of  Boolean  functions  iTTinimTsi  in  the  last 
few  years. 

C.  Carlet  and  A.  Pott  (Eds.):  SETA  2010,  LNCS  6338,  pp.  35943721  2010. 

(c)  Springer- Verlag  Berlin  Heidelberg  2010 


Report  Documentation  Page 


Form  Approved 
OMB  No.  0704-0188 


Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 


1.  REPORT  DATE 

2010 


2.  REPORT  TYPE 


3.  DATES  COVERED 

00-00-2010  to  00-00-2010 


4.  TITLE  AND  SUBTITLE 

Nega-Hadamard  Transform,  Bent  and  Negabent  Functions 


6.  AUTHOR(S) 


7.  PERFORMING  ORGANIZATION  NAME(S)  AND  ADDRESS(ES) 

Naval  Postgraduate  School, Department  of  Applied 
Mathematics, Monterey, CA, 93943 


5a.  CONTRACT  NUMBER 


5b.  GRANT  NUMBER 

5c.  PROGRAM  ELEMENT  NUMBER 

5d.  PROJECT  NUMBER 


5e.  TASK  NUMBER 


5f.  WORK  UNIT  NUMBER 

8.  PERFORMING  ORGANIZATION 
REPORT  NUMBER 


9.  SPONSORING/MONITORING  AGENCY  NAME(S)  AND  ADDRESS(ES) 


10.  SPONSOR/MONITOR'S  ACRONYM(S) 


11.  SPONSOR/MONITOR'S  REPORT 
NUMBER(S) 


12.  DISTRIBUTION/AVAILABILITY  STATEMENT 

Approved  for  public  release;  distribution  unlimited 

13.  SUPPLEMENTARY  NOTES 

14.  ABSTRACT 

In  this  paper  we  start  developing  a  detailed  theory  of  nega?  Hadamard  transforms.  Consequently,  we 
derive  several  results  on  negabentness  of  concatenations,  and  partially-symmetric  functions.We  also  obtain 
a  characterization  of  bent?negabent  functions  in  a  subclass  of  Maiorana?McFarland  set.  As  a  by-product 
of  our  results  we  obtain  simple  proofs  of  several  existing  facts. 


15.  SUBJECT  TERMS 

16.  SECURITY  CLASSIFICATION  OF: 


a.  REPORT 

unclassified 


b.  ABSTRACT 

unclassified 


c.  THIS  PAGE 

unclassified 


17.  LIMITATION  OF 

18.  NUMBER 

ABSTRACT 

OF  PAGES 

Same  as 

14 

Report  (SAR) 

19a.  NAME  OF 
RESPONSIBLE  PERSON 


Standard  Form  298  (Rev.  8-98) 

Prescribed  by  ANSI  Std  Z39-18 


360  P.  Stanica  et  al. 

In  this  paper  we  concentrate  on  the  nega-Hadamard  transform  in  more  details. 
In  particular,  we  have  the  following  broad  contributions. 

—  We  present  a  detailed  study  of  some  of  the  properties  of  nega-Hadamard 
transform  in  Section  [2j  We  obtain  several  results  analogous  to  Hadamard 
transformation. 

—  Based  on  the  previous  analysis,  we  obtain  several  results  with  respect  to  the 
decomposition  of  negabent  functions  in  Section  [3] 

—  In  Section  2]  we  study  negabent  functions  that  are  symmetric  with  respect 
to  two  variables.  Our  study  results  simple  proof  of  the  main  result  in  the 
paper  m  that  all  the  symmetric  negabent  functions  must  be  affine. 

—  A  characterization  of  some  bent-negabent  functions  in  Maiorana-McFarland 
class  is  obtained  in  Section  [5]  thus  complementing  some  results  of  [TS]  ■ 

1.1  Definitions  and  Notations 

The  set  of  all  Boolean  functions  on  n  variables  is  denoted  by  Bn.  Any  element 
x  £  FJ  can  be  written  as  an  n-tuple  (x\, . . .  ,xn),  where  Xi  £  F2  for  all  i  = 
The  set  of  integers,  real  numbers  and  complex  numbers  are  denoted 
by  Z,  R  and  C  respectively.  The  addition  over  Z,  R  and  C  is  denoted  by  “+’. 
The  addition  over  F(f  for  all  n  >  1,  is  denoted  by  ®.  If  x  =  (xi, . . .  ,xn )  and 
y  =  (j/i, ,  yn)  are  two  elements  of  F(? ,  we  define  the  scalar  (or  inner)  product, 
respectively,  the  intersection  by 

x  •  y  =  xiyi  ©  x2y2  ©  •  •  •  ©  xnyni  x  *  y  =  (xij/i,  x2y2,  ■  ■  ■ ,  xnyn). 

The  cardinality  of  the  set  S  is  denoted  by  |5|.  If  z  =  a  +  bi  £  C,  then  \z\  = 
\J  a2  +  b2  denotes  the  absolute  value  of  z,  and  z  =  a  —  bi  denotes  the  complex 
conjugate  of  z,  where  i2  =  — 1,  and  a,b  £  R.  Any  f  £  Bn  can  be  expressed  in 
algebraic  normal  form  (ANF)  as 


The  ( Hamming )  weight  of  x  £  F^  is  wtfx)  :=  The  algebraic  degree 

of  /,  deg(/)  :=  maxaeFj{wt(a)  :  /ia  7^  0}.  Boolean  functions  having  algebraic 
degree  at  most  1  are  said  to  be  affine  functions.  For  any  two  functions  f,g£  Bn, 
we  define  the  ( Hamming )  distance  d(f,g)  =  |{x  :  /(x)  ^  <?(x),x  £  F2" } | - 

The  Walsh-Hadamard  transform  of  f  £  Bn  at  any  point  u  £  Fj  is  defined  by 


Hf{ u)  =  2-5  Y,  (-1  )/(*)eu-x 


xeFj 


A  function  /  £  Bn  is  a  bent  function  if  |7Y/(u)|  =  1  for  all  A  £  F£.  Bent 
functions  (defined  by  Rothaus  1 1  '>!  more  than  thirty  years  ago)  hold  an  interest 
among  researchers  in  this  area  since  they  have  maximum  Hamming  distance 
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from  the  set  of  all  affine  Boolean  functions.  Several  classes  of  bent  functions  were 
constructed  by  Rothaus  [ISj,  Dillon  [5],  Dobbertin  [7],  and  later  by  Carlet  [T], 
The  sum  Cf.g( z)  =  SxeFj(— is  the  crosscorrelation  of  /  and  g 
at  z.  The  autocorrelation  of  /  £  Bn  at  u  S  FJ  is  Cfj( u)  above,  which  we  denote 
by  C/(u).  It  is  known  [Jj  that  a  function  f  £  Bn  is  bent  if  and  only  if  C/(u)  =  0 
for  all  u/0. 

For  a  detailed  study  of  Boolean  functions  we  refer  to  Carlet  m,  and  Cusick 
and  Stanica  [4]. 

The  nega-Hadamard  transform  of  /  £  Fff  at  any  vector  u  S  Fj  is  the  complex 
valued  function:  _ 

Uf{ u)  =  2-5  Y  (-l)/(x)0u'x*^(x). 

xeFj 

A  function  is  said  to  be  negabent  if  the  nega-Hadamard  transform  is  flat  in 
absolute  value,  namely  |A/"/(u)|  =  1  for  all  ugFj.  The  sum 

Cft9{ z)=  Y  (-l)/(x)0ff(x®z)(-l)x'z 

xeFj 

is  the  nega-crosscorrelation  of  /  and  g  at  2.  We  define  the  nega-autocorrelation 
of  /  at  u  £  Fff  by 


C/(ll)  =  ^  (_l)/(x)0/(x©u)(_1)x  u 

xgfj 

The  negaperiodic  autocorrelation  defined  by  Parker  and  Pott  mm  is  as  follows 

71,(11)  =  y  (— i)/(x)0/(x0u)(— i)'wt(u)(— i)xu- 

xeFj 

It  is  to  be  noted  that  the  difference  between  the  above  two  definitions  is  not 
critical  and  both  the  defintions  can  be  used. 

As  we  will  be  referring  later,  we  also  present  the  definition  of  a  symmetric 
Boolean  function.  A  Boolean  function  is  said  to  be  symmetric  if  inputs  of  the 
same  weight  produce  the  same  output,  that  is,  /(x)  =  /(cr(x)),  for  any  permu¬ 
tation  a. 

2  Properties  of  Nega-Hadamard  transform 

It  is  a  well  known  fact  that  if  /  £  Bn,  then  the  Walsh-Hadamard  transform 
TLf(X)  is  invertible,  and  so, 

(-!)/(-)  =  2-^  Y  (1) 

uGFJ 

for  all  x  G  F£.  The  nega-Hadamard  transform  is  also  a  unitary  transformation. 
An  immediate  consequence  of  the  definition  of  nega-Hadamard  transformation 
of  a  function  /  £  Bn  in  |11I14|  is  the  following: 
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Lemma  1.  Suppose  f  £  Bn.  Then 

(-l)/(y)  =  ^  A//(u)(— l)y  u,  (2) 

weFJ 


for  all  y  £  F(( . 

Next,  we  prove  a  theorem  that  gives  the  nega-Hadamard  transform  of  various 
combinations  of  Boolean  functions.  We  shall  use  throughout  the  well-known 
identity  (see  [TP]') 


wt(x  ®  y)  =  wt(x)  +  wt( y)  —  2 wt(x  *  y).  (3) 

Theorem  1.  Let  f,g,h  be  in  Bn.  The  following  statements  are  true: 

(а)  JVo(u)  =  —  A/i(u)  =  uni~wt^\  and  Afh<$i(u)  =  —  A4(u),  u  £  Fg,  where  0, 1 
are  the  constant  0,  respectively,  1  functions;  and,  ai  is  an  8-th  primitive  root 
of  1,  namely  w  =  (1  +  i)/V 2.  In  general,  for  any  affine  function  fa,c(x)  = 
a  ■  x  ®  c,  we  have  A/fa  c(u)  =  (— 1  )cwnz-'urt(a©u). 

(б)  If  /i(x)  =  /(x)  ®  g(x)  on  F£ ,  t/ien  for  u  £  F£ , 

A//j(u)  =  2-"/2  Y  A/)(v)Wfl(uffi  v)  =  2-"/2  ^  Hf(v)ATg( u®  v). 

v£FJ  jjGFJ 

(c)  If  Ia jC(x)  =  a  •  x  ®  c  affine,  then  ( u)  =  (— l)cA//(a  ®  u). 

(d)  If  h(x)  =  /(Ax®  a),  then  Afh{u)  =  (— i)a-(Au)  W/(Au  ®  a),  where  A 
is  an  n  x  n  orthogonal  matrix  over  F2  (and  so,  AT  A  =  In). 

(e)  ///i(x,y)  = /(x)  ®  p(y),x,y  £  F”,  then  ATf(Bg{u,v)  =  Nf(u)Ng(v). 

{f)  If  f  &Bn,g  £  Bk,  and  h(x,  y)  =  f(x)g(y),  then 

2k^h(u,v)  =  Uf(u)Agl(v)  +  con  i~wt^Ag0(v), 

Ag\(y)  +  Ag0(v)  =  2k/2ujki~wt('v\ 

where  Aff0(v)  =  Ey,ff(y)=o(-l)y'v ‘“t(y  W(v)  =  Ey,s(y)=i(-l)y'v  *“‘(y)- 
Moreover,  if  k  =  1, 

21/2Afy/(x)(u,u)  =  (-l)%A/)(u)  +w" 

21/2Af(y01)/(x)(u,  t,)  =  A//(u)  +  a,"(-ir 

Proof.  Claim  (a)  follows  from  Lemma  1  of  ng  ,  since  Ao(u)  =  —  A/i(u)  = 
2-71/2  Ey  (— l)u  y  =  We  now  show  the  first  identity  of  ( b )  (the 

second  is  absolutely  similar).  Since 

A/}(v)  =  2~n/2  Y  (-l)/(y)®y'viu,t(y) 
yeFj 

Hg( uffiv)  =  2~n/2  Y  (— l)s(z)0z'(u0v) 

zeFj 
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2n  if  v  =  0 
0  if  v  /  0, 


and  (see  21  P-  8]) 

E(-1)V'X  = 

X 

we  obtain  (all  sums  are  over  Fj) 

E  A/>(v)Hs(u®  v)  =  2~n  E  (-l)/(y)®9(z)+v'(y®z)®u'z  iwt{y) 

veFJ  V,y,z 

=  2~n  ^(— ij/(y)®9(z)®u,z  y^(_i)v-(y®z) 

y,z  v 

=  ^(_i)/(y)®s(y)®u'y  *^(y)  =  2n/2A//®ff(u). 
y 

Further,  (c)  follows  from  (6),  since 


H^Jw)  =  2-”/2E(-1)a'y®Wy®C 

y 

=  2~n/2(— i)c  y^(_i)(»ew)-y 

y 

j  (— l)c2n/2  if  a  =  w 

if  a  ^  w. 

The  property  (d)  can  be  derived  from  [TT]  Lemma  2]  and  [T51  Theorem  2].  It  is 
to  be  noted  that  m  Theorem  2]  further  proves  that  the  action  of  orthogonal 
group  preserves  bent-negabentness  property  of  a  Boolean  function.  Item  (e)  is 
straightforward.  To  show  item  (/),  we  write 

2(n+fe)/2A4(u,v)  =  E  (_l)/(x)s(y)©xu©yv  7™t(*)+wt(  y) 

(x,y)eFj+fc 


_  ^  (_ i)y  v  ^*(y)  y^(_x)/(x)®x  u  twt(x) 

y,ff(y)=i  x 

+  E  (_l)y-v  jV)t(y)  ?u't(x) 

y,s(y)=o  x 

=  2"/2A/)(u)  E  (-l)y'v*wt(y) 


y,3(y)=i 

■ n/2,.,n 


+2  n'Auni 


E  (-1)5, 


V  wt( y) 


y-s(y)=o 


from  which  we  obtain  the  desired  identity.  Moreover,  if  k  =  1,  and  g(y)  =  y7  then 
Ag0{v)  =  l,^4gi(v)  =  (-l)w«,  and  if  g(y )  =  y  ®  1,  then  Agl(v)  =  l,Ag0(v)  = 
(— l)v  i ,  and  so 

2VX/(x)(u,«)  =  (-l)viMf(u)+coni-w' 

21/2AT(,01)/(x)(u,  v)  =  A//(u)  +  W"(-l)«  *-^u>+1. 

The  proof  of  the  theorem  is  done.  □ 
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The  next  result  is  analogous  to  the  result  on  the  crosscorrelation  of  two  Boolean 
functions  m-  In  the  nega-Hadamard  transform  context,  the  basic  idea  of  this 
result  is  explained  in  |5j  and  equation  (15)  of  [13|.  In  Lemma  2  we  are  able 
to  use  Hadamard  transform  because  unlike  the  definition  in  mm  our  nega- 
crosscorrelation  does  not  include  the  factor  (—l)wt^uK 

Lemma  2 .  If  f,  g  £  Bn,  then  the  nega-crosscorrelation 

Cf,g( z)=  ^(-i)/(x)®9(xez)(_1)x.z  =  ^t(z)  £  A/)(u)A^(-l)u'z. 

x£F£  116F2 


Proof.  The  sum 


^  ^AA/(u)M)(u)(-1)u'z  =  2- 


uGFJ 


£  £  (-i)« 

xGFJ  y£FJ 


x)®S(y)  yWt(x)—wt(y)+wt(z) 


x  ^  ^ ^  ju-(x©y©z) 
u£F” 


(_4)/(x)ffis(x©z)(_4)x'z 

x£FJ 


□ 

If  we  consider  the  case  /  =  g  in  the  previous  lemma,  then  we  obtain 

Y  (— 1)/(x)©/(x®z)(— i)x  z  =  *u,t(z)  y  'v>(u)^7(u)(-1)u'z 

xEF~  uGF, 

(4) 

=  ^t(z)  £  |A//(u)|2(— l)u'z. 

ueF” 

This  is  an  analogue  of  autocorrelation  of  Boolean  functions.  It  is  to  be  noted 
that  since  both  Hadamard  and  nega-Hadamard  transforms  are  unitary  they  are 
energy  preserving  and  hence,  Parseval’s  theorem  holds  for  both  the  transforma¬ 
tions.  The  classical  Parseval’s  identity  takes  the  form 

£(W/(u))2  =  2" 

ugfj 

for  Walsh-Hadamard  transform.  Substituting  z  =  0  in  the  equation  (|1|),  we 
obtain  a  proof  of  this  fact  for  the  particular  case  of  nega-Hadamard  transforms. 


Corollary  1  ( nega-P  arsenal’s  identity).  We  have 

£  |A/}(u)|2  =  2".  (5) 

u£FJ 

Lemma  3.  A  Boolean  function  f  £  Bn  is  negabent  if  and  only  if  C/( z)  =0  for 
all  z?f;\  {0}. 
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Proof.  If  /  is  a  negabent  function  then  |A//(u)|  =  1  for  all  u  £  F£.  For  all 
z  ^  0,  then  by  0  we  obtain  C/(z)  =  0.  The  converse  also  follows  from  the 
equation  ®.  □ 

An  equivalent  result  is  proved  after  equation  (15)  in  |T3] .  and  in  |lTT]  Theorem 
2]  for  the  negaperiodic  autocorrelation. 

Remark  1.  Lemma  [3]  provides  an  alternative  characterization  of  negabent 
functions. 

If  /  is  an  affine  function,  then  for  all  z  £  F(f  \  {0}  the  nega-autocorrelation 
C/(z)  =  0.  This  implies  that  any  affine  function  is  negabent.  For  alternative 
proofs  we  refer  to  m  Lemma  1]  and  El  Proposition  1]. 


3  Decomposition  of  Negabent  Functions  with  Respect  to 
Co-dimension  One  Subspaces 


Suppose  1  <  r  <  n.  Then  any  function  /  £  Bn  can  be  thought  of  as  a  function 
from  Fo  x  Fo-r  into  F2.  For  any  fixed  v  £  FS,  the  function  /v  £  Bn-r  is  defined 
as  /v(x)  =  /(v,  x)  for  all  x  £  ¥^~r . 

Theorem  2.  Let  f  £  Bn  expressed  as  f  :  F(i  x  F((-r  — >  F2.  Then 
C/(u,w)  =  J2  CA,Aeu(w)(-l)v'u- 

vGFJ 


Proof.  By  definition 

ca u,w)  =  E  E  (  _ -|^/(v,z)©/(v©U,Z©w)  ^ _ ^V-U©Z-W 

ze^~r 

=  Et-1>vu  E  (_l)Mz)©/v0u(z©w)  (_X)Z'W 


vgf; 


zgfj 


=  E  C'/v,/v9u(w)(-l )VU- 


vgf; 


Corollary  2.  Suppose  f  £  Bn  is  expressed  as 

/(x,2/)  =  /o(x)(l  ©  V)  ©  /i(x)y,  for  all  (x,y)  £  F^1  x  F2, 


(6) 

□ 


where  /o,/i  £  Bn- \.  Then 


Cf{  w,  0)  =  Cf0  (w)  +  Cfl  (w) 

C/(w,l)  =  C/0)/l(w)  -  (-l)-‘(w)c-/0i/l(w). 

The  functions  /  and  g  are  said  to  have  complementary  nega-autocorrelation  if 
for  all  nonzero  u  £  FJf 

C/(u)  +  Cg(u)  =  0. 

The  following  lemma  establishes  a  connection  between  the  nega-autocorrelations 
of  /,  g  and  their  nega-Hadamard  transformations. 
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Lemma  4.  Two  functions  f,g€  Bn  have  complementary  neg a- autocorrelations 
if  and  only  if 

|A//(u)|2  +  |A/"5(u)|2  =  2  for  all  u  £  F^1. 

Proof.  Let  /,  g  be  two  functions  with  complementary  nega-autocorrelations. 
Then 


|A/}(u)|2  +  |A/'s(u)|2 


2""  E  i-wt{z\Cf(Z)+Cg(z))(-ir  u 

z£F£ 


2~n2n+l 


=  2. 


Conversely,  suppose  |A//(u)|2  +  |A/"9(u)|2  =  2  for  all  u  £  F?b  Then 

Cf( z)  +  Cg( z)  =  £  dA//(u)|2  +  l^4(u)|2)(-l)1 

uGF” 

=  2 iwt^  (-1)u  z 

ugfj 

=  2n+hwt^S0{.z), 


where 


<5o(z) 


0  if  z  ^  0; 
1  if  z  =  0. 


Thus  the  functions  /  and  g  have  complementary  nega-autocorrelations. 
Theorem  3.  Suppose  h  £  Bn+  i  is  expressed  as 

y)  =  /(x)(1  ©  y)  ©  5(x)y>  for  all  (x,  y)  £  F2  x  Fa, 


(7) 

□ 


where  f,g  £  £>„.  TTien  the  following  statements  are  equivalent: 

(1)  h  is  negabent. 

(2)  f  and  g  have  complementary  nega-autocorrelations  and  C/0j/1(u)  =  0  for  all 
u  £  Fj  with  wt( u)  =  1  (mod  2). 

(3)  |A0'(u)|2  +  |Af9(u)|2  =  2  for  all  u  £  Fg  and  jf- is  a  real  number  whenever 

a>(u)  a; (u)  #0. 

Proof.  We  show  first  (1)  <=>■  (2).  Suppose  h  is  a  negabent  function.  Then 
Ch( u,  o)  =  0  for  all  nonzero  (u,  a)  £  F^  x  F2.  From  Corollary [2]  we  obtain 

Ch  (u,  0)  =  Cf(  u)  +  Cg(u)  =  0, 


for  all  u  £  Fj  \  {0}  and 

Ch{u,  1)  =  C/,fl(u)(l  -  =  0, 

which  implies  C'/i9(u)  =  0  for  all  u  £  F£  with  wt( u)  =  1  (mod  2). 
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Conversely,  let  us  assume  that  the  functions  /  and  g  have  complementary 
nega-autocorrelations  and  Cf,g( u)  =  0  for  all  u  €  F2  with  wt( u)  =  1  (mod  2). 
Then  by  Corollary[2j  6\(u,  a)  =  0  for  all  nonzero  (u,  a)  £  F2  x  F2.  This  implies 
that  h  is  a  negabent  function. 

We  now  show  (1)  •£=>■  (3).  The  nega-Hadamard  transform  of  h  at  (u,  a)  £ 
F2  x  F2  is 


Afh(u,a)  =  2-2^  Y  (_i)ftWy)©u'x®“?/^(x,3/) 
(x,j/)eFJxF2 

=  2~^  Y  (-l)/(x)®u-xt™*(x)  +  2-^  Y  (_1) 


g(x)©u-x©a  tut(x)  +  l 


xGF? 


xGF" 


Thus, 


A4(u,a) 


-j=Aff(u)  +  ^Afg(u)  if  o  =  0; 
7f -A/>  (u)  -  (u)  if  a  =  1 . 


Since  /i  is  negabent  |A/h(u,  a)|  ==  1  for  all  (u,  a)  £  F2  x  F2  we  obtain 


(8) 


-^=Aff(u)  +  -^=JVg(u) 

71^ (u)  -  7f^(u) 


=  1, 

=  1. 


(9) 


If  h  is  negabent,  then  by  Lemma|3]and  the  equivalence  of  the  first  two  statements 
proved  above  we  obtain: 


|A//(u)|2  +  |7Vg(u)|2  =  2  for  all  u  £  F2. 

Suppose  for  u  e  F2,  \Nj (u) | \Afg (u) |  yf  0.  Let  z\  =  ^=A//(u)  and  z2  =  -^Afg(u). 
Then  by  equation  ©  we  obtain 

\zi  +  z2\ 2  =  \zi  -  z2\2,  that  is 
z\~zi  =  -z2zl 


Therefore  we  have  A/>(u)Wg(u)  =  Afg (u)A/> (u) ,  i.e.,  ■ 

This  proves  that  gj  is  a  real  number. 

Conversely,  suppose  |A//(u)|2  +  |A/^, (u) | 2  =  2  for  all  u  £  F2  and  is  a 

real  number  whenever  |A//(u)||A/’g(u)|  y^  0. 

Without  loss  of  generality,  we  may  first  assume  A//(u)  =  0,  for  some  u  £  F2 . 
Then  by  the  above  condition  |A/rg(u)|  =  y/2.  By  equation  ©,  |A//i(u,  a)|  =  1  for 
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all  a  £  F2.  Next  we  consider  the  case  when  |A// (u)  |  \Mg (u) |  ^  0.  Let  </>( u)  = 

N»(u)  rpl,„„ 

TTJfaj'  ihen 


|A/)j(u,  a)  | 2 


|_LAA/(u)  +  i(-l)“-L^(u)AA/(u)|2 
i\Aff(U)\2\i+i(-in(u)\2 
i|A/)(u)|2(l  +  |<Ku)|2) 


;|A/)(u)|2  1  + 


|M,(u)|2 

l^>(u)|S 


-(|V/(u)|2  +  |Vg(u)|2)  =  l. 


Thus  h  is  negabent. 


(10) 


□ 


4  Negabent  Functions  Symmetric  about  Two  Variables 


Suppose  h  £  Bn  is  a  Boolean  function  which  is  symmetric  with  respect  to  two 
variables,  y  and  z  say.  Then  there  exist  functions  f,g,s£  Bn- 2  such  that 


/i(x,  y,  z)  =  /(x)  ©  (/(x)  ©  y(x))(y  0  z)  ©  s{x.)yz  (11) 

for  all  (x,  y,  z)  £  Fj-2  x  F2  x  F2.  The  Boolean  function  h  is  bent  if  and  only  if, 
/  and  g  are  bent  and  s(x)  =  1  for  all  x  £  F(V2  (see  |2l3l4l20jh  For  negabent 
functions  we  prove  the  following  similar  result. 

Theorem  4.  Suppose  h  £  Bn  is  expressed  as  /i(x,  y,  z)  =  /(x)  0  (/(x)  0 
y(x))(y  0  z)  0  s(x)yz  for  all  (x,y,  z)  £  F(V2  x  F2  x  F2.  The  Boolean  func¬ 
tion  h  is  negabent  if  and  only  if  f  and  g  are  negabent  and  s(x)  =  0  for  all 
x  £  F£ . 

Proof.  The  nega-autocorrelation  of  h  at  (0,1,1)  is 


^(0,1,1)  =  E  EE 

x£FJ-2  2/6F2  2eF2 

=  E  (-i)*(x>  E  (_l)s(x)y®y  ^(_i)*(x)-®- 

xeFj-2  ye  f2  *eF2 

=  E  i-1)*”  E  (— l)s(x)y®y(l  +  (— i)s(x)®1) 

xeFj-2  yeF2 


=  2  E  (-i)EH)2s  =  4  E  (-1) 

xgfJ_2,s(x)=i  yeF2  xeFj_2,s(x)=i 

=  -4|{x£Fr2:S(x)  =  l}|. 
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If  h  is  a  negabent  function  then  Ch( 0, 1, 1)  =  0.  Therefore  |{x  £  Fl(~2  :  s(x)  = 
1}  |  =  0,  which  implies  that  s(x)  =  0  for  all  x  €  FI]-2-  Thus,  if  h  is  a  negabent 
function  and  symmetric  with  respect  to  the  variables  y  and  z,  then  it  can  be 
expressed  as 

h(x,y,z)  =  /(x)  ©  (/(x)  ©  g(x))(j/  ®  z),  for  all  (x,y,z)  €  F^-2  x  F2  xF2.  The 
nega-Hadamard  transform  A/],(u,  a,  b)  of  h  at  (u,  a,  b)  £  FI]-2  x  F2  x  F2  is 


'  2.  2. 

xgfJ-2  ye  f2  zgf2 


^_^^/(x)©(/(x)©g(x))(i/©z)+U'X©ay©6z  ^iut(x,g,z) 


Expanding  the  above  sum  by  substituting  all  possible  values  of  (y,  z)eF2x  F2 
we  obtain 

A4(u,  a,  b)  =  1-(-1)  8  A//(u)  +  ?(-1)  |fell  AZ'g(u).  (12) 

Therefore  J\fh(u,a,b)  £  |A/"/(u),  ±jA/"s(u)}  for  all  (u,  a,  b)  £  F]]-2  x  F2  x  F2. 
This  proves  that  both  /  and  g  are  negabent.  On  the  other  hand  if  /  and  g  are 
negabent  functions  then  h  is  also  negabent.  This  shows  the  converse.  □ 

Corollary  3.  A  symmetric  negabent  function  is  affine. 


Proof.  Let  h  £  Bn  be  a  symmetric  negabent  function.  Let  us  suppose  that  h  has 
algebraic  degree  greater  than  or  equal  to  2.  Since  h.  is  symmetric,  it  is  symmetric 
with  respect  to  any  two  variables.  Therefore,  it  is  possible  to  express  h,  for  at 
least  one  pair  y,  z  of  variables,  as  follows 


Mx,  y,  z )  =  /(x)  ©  (/(x)  ©  g(x))(y  ©  z)  0  s(x)yz, 

where  s(x)  ^  0  for  at  least  one  x  £  FI]-2-  But  this  contradicts  the  fact  that  h  is 
negabent.  Hence  all  symmetric  negabent  functions  are  affine.  □ 

The  result  of  Corollary  [3]  gives  an  alternate  proof  of  the  fact  proved  in  El- 
In  fact,  the  case  for  even  n  can  be  immediately  obtained  following  the  result 
of  Parker  and  Pott  EL  which  gives  a  connection  between  bent  and  negabent 
functions. 

Theorem  5  (|11L  Thm.  12]).  A  function  f  :  F^™  — >  F2  is  negabent  if  and 
only  if  f  ©  s2  is  bent,  where  s2(x i,  x2, . . . ,  £2m)  =  .  XiXj  is  the  elementary 

symmetric  function  of  degree  2. 

We  note  that  s2  is  actually  a  homogeneous  (that  is,  all  terms  of  its  ANF  are  of 
the  same  degree),  symmetric  and  quadratic  bent  function. 

Let  s\{x\,X2,  ■  ■  ■ ,  X2 m)  =  XL  xu  (only)  symmetric  linear  function  involv¬ 
ing  all  the  variables.  In  |18j  it  is  shown  that  the  only  symmetric  bent  functions 
are  s2,  s2  ©  Si,  1  ©  s2,  1  ©  s2  ©  s2. 

In  [IT) .  it  is  proved  (by  a  long  argument)  that  all  the  symmetric  negabent 
functions  are  affine.  Following  mm,  the  result  of  El  can  be  achieved  in  a  few 
lines  for  even  n. 
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Theorem  6.  Let  n  be  even.  A  symmetric  function  /  €  Bn  is  negabent  if  and 
only  if  it  is  affine. 

Proof.  Suppose  /  €  Bn  is  a  symmetric  negabent  function.  Then  /  ©  S2  is  a  bent 
function.  Since  the  direct  sum  of  two  symmetric  functions  is  symmetric,  then 
/  ©  S2  is  a  symmetric  bent  function.  The  only  symmetric  bent  functions  are  S2, 
S2  ©  Si,  1  ©  S2,  1  ©  S2  ©  Si  (see  [T5]).  Therefore  /  can  be  0,  1,  Si,  1  ©  si  and 
nothing  else.  This  proves  that  if  /  is  a  symmetric  negabent  function  on  even 
number  of  variables  then  it  is  affine. 

Conversely,  it  is  known  that  all  affine  functions  are  negabent  [T9] .  Therefore, 
symmetric  functions  on  even  number  of  variables,  if  affine,  are  negabent.  □ 

Bent  functions  do  not  exist  for  odd  number  of  input  variables.  Thus  there  is 
no  equivalent  characterization  of  Theorem  [5]  for  odd  dimension,  and  the  result 
of  [T^  cannot  be  proved  trivially  as  before.  However,  the  odd  (as  well  as  the 
even)  case  has  already  been  taken  care  of  by  Corollary  [3] 


5  Bent— Negabent  Functions  in  Maiorana— McFarland 
Class 


In  this  section  we  shall  investigate  bent  functions  which  are  also  negabent  in  the 
Maiorana-McFarland  (MM)  class  of  bent  functions,  namely 

/(x,y)  =  tt(x) -y©g(x),  x,y  (13) 

where  n  is  a  permutation  satisfying  wf(x  ©  y)  =  wt( n(x)  ©  7r(y))  (we  call  7r  a 
weight-sum  invariant  permutation),  for  all  x,y,  and  g  is  an  arbitrary  Boolean 
function,  both  on  F(f .  We  remark  that  if  ir  is  orthogonal,  that  is,  7r(x)  =  A  ■  x 
with  A  orthogonal  (AT  A  =  Jn),  then  it  satisfies  the  imposed  condition  (since 
u;t(7r(x)©7r(y))  =  ict(H(xffiy)),  it  suffices  to  show  that  wt(Az)  =  wt( z);  for  that, 
consider  wt(Az)  =  (Az)T  ■  (Az)  =  zT (AT A)z  =  wt(z)).  It  could  be  interesting 
to  see  if  there  are  such  weight-sum  invariant  permutations  outside  of  the  linear 
orthogonal  group  generated  ones. 

Theorem  7.  A  function  as  in  (1131)  on  is  bent-negabent  if  and  only  if  g  is 
bent. 


Proof.  We  evaluate 

A//(u,  v)  =  2~n  ^  (_l)7r(x)-y©fl,(x)©x-u©yvzu;t(x)+t«t(y) 

(x,y)eFl» 

_  2~n  [_i)s(x)©x  u  twt(x)  [_i)7r(x)-y©y-v  j-u't(y) 

x£F£  y£F£ 

=  2~n  (_l)3(x)©x.u  z™t(x)2n/2^n  t-«,t(ir(x)©v) 

xGF^ 

_  2~n/‘2UJn  'y  ^  ^_2^(x)©x‘u  ^iwi(x)— itft(7r(x)®v) 
x£F£ 
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Now,  using  the  fact  that  7r  is  a  weight-sum  invariant  permutation,  and  by 
we  obtain 

wt{ 7r(x)  ®  v)  =  wt(x  ®  7r-1(v)), 

wt(x)  —  wt{ 7r(x)  ®  v)  =  —wt( 7r_1(v))  +  2 wt(x  *  7r_1(v)),  and 

l2iut(x*7r_1(v))  _  ^_^^x-7T_1(v) 

which  implies  that 

7V/(u,  v)  =  2_"/20 ;"j-’"t(,r"1(v))  ^  (_l)9(x)©x4u©x_1(v)) 

xeFj 

=  UJn  rffii(rl(V))f<9(u  ®  7T_ 1  (v)). 

Consequently, 

|A/}(u,v)|  =  |Wg(u®7T_1(v))|, 

which  implies  our  claim.  □ 

The  following  corollary  follows  easily  from  our  theorem,  since  bent  functions  exist 
for  any  degree  up  to  half  of  the  (even)  dimension.  We  remark  that  Theorem  10 
of  m  gives  an  upper  bound  of  n  —  1  on  the  degree  of  a  bent-negabent  function, 
but  not  an  existence  result. 

Corollary  4.  If  f  as  in  da  is  bent-negabent  with  n  weight-sum  invariant ,  then 
the  degree  of  f  is  bounded  by  n/2.  Moreover ,  there  exist  bent-negabent  functions 
in  the  MM  class  of  any  degree  between  2  and  n/2. 
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